4 ms·

Let's say I social engineer a password out of one of these people. What can I do with that?

by TchoBeer 5y ago

fermentation 5y ago
You can restart their router enough times until they get annoyed and buy a new one.
soheil 5y ago
You can install openWRT on their router and gain full access to their network.
- TchoBeer 5y ago
  Once I get access to their network, what can I do? What does that do for me?
  - ineedasername 5y ago
    Search for vulnerable PC's, install ransomware, extract $$ from the victim. Or just generally cause havoc "for the fun of it", which seems to be a not uncommon motive for some people.
    - TchoBeer 5y ago
      Does the router have the ability to install software onto connected devices?
      - ineedasername 5y ago
        The issue isn't the router installing something onto connected devices. I suppose that's not technically impossible, but the issue is someone accessing connected devices through the router and compromising connected devices more directly. This would be even easier if-- because a person putting their router on the internet might not understand good security practices-- they might also be more likely to do things like punch holes through NAT without understanding the risks and proper precautions. Even without the user misusing NAT, a router will often give a list of connected devices, internal IP, and other details. An attacker with admin access to the router can easily punch their own holes through NAT to any of those devices, run port scans, and find vulnerabilities to exploit.
    - quickthrower2 5y ago
      I guess you can also add it to a botnet?
  - fny 5y ago
    You can MITM their connections.
    - symlinkk 5y ago
      Not if they’re using HTTPS
      - soheil 5y ago
        DNS poisoning is a thing
SturgeonsLaw 5y ago
You can set up a VPN and connect directly to their network. You can put one of their computers into the DMZ and expose all its open ports to the internet. You could engage in denial of service by blocking their devices or messing with the WAN configuration. You could set their network to use a malicious DNS server and direct them to hosts that you control.

Let's say I social engineer a password out of one of these people. What can I do with that?

fermentation 5y ago

You can restart their router enough times until they get annoyed and buy a new one.

soheil 5y ago

You can install openWRT on their router and gain full access to their network.

TchoBeer 5y ago
Once I get access to their network, what can I do? What does that do for me?
- ineedasername 5y ago
  Search for vulnerable PC's, install ransomware, extract $$ from the victim. Or just generally cause havoc "for the fun of it", which seems to be a not uncommon motive for some people.
  - TchoBeer 5y ago
    Does the router have the ability to install software onto connected devices?
    - ineedasername 5y ago
      The issue isn't the router installing something onto connected devices. I suppose that's not technically impossible, but the issue is someone accessing connected devices through the router and compromising connected devices more directly. This would be even easier if-- because a person putting their router on the internet might not understand good security practices-- they might also be more likely to do things like punch holes through NAT without understanding the risks and proper precautions. Even without the user misusing NAT, a router will often give a list of connected devices, internal IP, and other details. An attacker with admin access to the router can easily punch their own holes through NAT to any of those devices, run port scans, and find vulnerabilities to exploit.
  - quickthrower2 5y ago
    I guess you can also add it to a botnet?
- fny 5y ago
  You can MITM their connections.
  - symlinkk 5y ago
    Not if they’re using HTTPS
    - soheil 5y ago
      DNS poisoning is a thing

SturgeonsLaw 5y ago

You can set up a VPN and connect directly to their network. You can put one of their computers into the DMZ and expose all its open ports to the internet. You could engage in denial of service by blocking their devices or messing with the WAN configuration. You could set their network to use a malicious DNS server and direct them to hosts that you control.